Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/G90iElFBEsOIFSyt6h4iAYdPhUY.roa
File: G90iElFBEsOIFSyt6h4iAYdPhUY.roa (raw, json)
Hash identifier: f8fJUDjAZs9fmkcKbNZ0eRHM/CitGbvZLhsVjDu2B3Q=
Subject key identifier: 1B:DD:22:12:51:41:12:C3:88:15:2C:AD:EA:1E:22:01:87:4F:85:46
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2A65
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/G90iElFBEsOIFSyt6h4iAYdPhUY.roa
Signing time: Fri 01 Sep 2023 10:07:51 +0000
ROA not before: Fri 01 Sep 2023 10:07:51 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 118.233.246.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10853 (0x2a65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:51 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=1BDD2212514112C388152CADEA1E2201874F8546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:44:c0:9e:3c:89:9e:30:76:33:24:f8:83:57:
b0:37:8a:9a:12:76:c2:6f:23:73:ca:70:08:ae:4c:
65:31:0f:11:0a:a9:3d:70:14:a8:99:f3:5f:3a:89:
05:36:5b:2d:f6:b0:6c:ca:13:ea:77:06:22:4f:50:
35:d2:9d:5e:3f:55:31:00:6a:4e:20:34:71:57:37:
30:00:c7:41:ce:04:12:62:09:b5:a4:1e:8e:05:86:
84:f1:f3:a9:80:0b:25:7a:37:70:73:1d:a9:44:75:
7f:80:61:78:1a:15:4a:0a:15:9f:53:e1:04:ee:ab:
d7:91:28:88:89:c7:0d:05:c2:b9:0d:ba:1c:fc:e4:
4d:c7:e0:47:38:ea:94:bf:76:af:80:69:d9:2f:d8:
49:d7:fe:a3:68:50:e1:82:7f:66:3d:94:97:7e:61:
28:20:48:66:7e:e0:a8:be:28:81:a5:60:5a:55:b5:
f5:16:24:53:76:f8:83:1f:0e:07:e8:77:ef:b3:37:
4a:c9:e6:ab:01:0f:cb:de:a1:d4:f5:66:9a:ba:d7:
47:81:12:0b:93:d0:1e:f8:bb:8a:61:06:de:03:ef:
47:27:50:ab:07:2e:e1:af:ef:c5:38:62:7b:d2:46:
d8:5d:2a:52:4c:68:d4:84:65:77:c1:e5:f1:ae:b7:
ed:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:DD:22:12:51:41:12:C3:88:15:2C:AD:EA:1E:22:01:87:4F:85:46
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/G90iElFBEsOIFSyt6h4iAYdPhUY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.246.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:4a:a6:16:01:62:44:67:d6:88:58:ad:f7:8e:33:88:f7:4d:
2a:6d:79:52:86:d6:6b:88:92:c8:9c:9a:2f:44:3e:a3:f5:9e:
e5:10:a3:49:54:9a:33:e9:68:ce:ab:24:84:5d:ea:25:6e:ef:
00:6d:b9:61:88:0e:02:04:7f:1b:3c:23:7f:43:03:ab:86:17:
0a:d7:dd:57:38:d1:ed:4f:c9:1c:c8:db:87:e4:59:f3:52:41:
e3:ea:c7:09:8a:43:5f:ae:09:ad:da:bf:51:87:c9:27:58:2c:
42:ce:fa:1a:35:9c:3c:86:33:22:5b:04:94:be:52:fb:09:7b:
46:e1:f4:e5:0b:5a:b1:0a:7b:27:2b:58:c1:18:cd:0d:47:58:
f3:8a:96:83:0a:47:0a:ed:6a:a1:e1:41:ad:ed:39:59:57:1d:
e5:60:95:48:a2:19:ea:7b:25:16:5f:7e:5a:0e:7c:39:75:63:
95:35:03:98:0b:00:ad:aa:b5:2e:0a:62:52:70:29:e9:1a:22:
54:f9:3f:59:a4:fe:38:de:39:ef:48:d1:90:e2:7e:b7:7a:f8:
a9:cf:58:9b:21:fc:4d:4e:15:78:de:23:f7:5f:b2:b5:49:ad:
d2:c9:be:0e:58:81:67:ae:3f:b6:14:fc:45:05:d3:67:8a:4d:
3a:be:72:50
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKmUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA3NTFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDFCREQyMjEyNTE0MTEy
QzM4ODE1MkNBREVBMUUyMjAxODc0Rjg1NDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJRMCePImeMHYzJPiDV7A3ipoSdsJvI3PKcAiuTGUxDxEKqT1w
FKiZ8186iQU2Wy32sGzKE+p3BiJPUDXSnV4/VTEAak4gNHFXNzAAx0HOBBJiCbWk
Ho4FhoTx86mACyV6N3BzHalEdX+AYXgaFUoKFZ9T4QTuq9eRKIiJxw0FwrkNuhz8
5E3H4Ec46pS/dq+Aadkv2EnX/qNoUOGCf2Y9lJd+YSggSGZ+4Ki+KIGlYFpVtfUW
JFN2+IMfDgfod++zN0rJ5qsBD8veodT1Zpq610eBEguT0B74u4phBt4D70cnUKsH
LuGv78U4YnvSRthdKlJMaNSEZXfB5fGut+0rAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUG90iElFBEsOIFSyt6h4iAYdPhUYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0c5MGlFbEZCRXNPSUZTeXQ2
aDRpQVlkUGhVWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF2
6fYwDQYJKoZIhvcNAQELBQADggEBACtKphYBYkRn1ohYrfeOM4j3TSpteVKG1muI
ksicmi9EPqP1nuUQo0lUmjPpaM6rJIRd6iVu7wBtuWGIDgIEfxs8I39DA6uGFwrX
3Vc40e1PyRzI24fkWfNSQePqxwmKQ1+uCa3av1GHySdYLELO+ho1nDyGMyJbBJS+
UvsJe0bh9OULWrEKeycrWMEYzQ1HWPOKloMKRwrtaqHhQa3tOVlXHeVglUiiGep7
JRZffloOfDl1Y5U1A5gLAK2qtS4KYlJwKekaIlT5P1mk/jjeOe9I0ZDifrd6+KnP
WJsh/E1OFXjeI/dfsrVJrdLJvg5YgWeuP7YU/EUF02eKTTq+clA=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:18 2024 by rpki-client on console-ams.rpki-client.org